IN THE CLAIMS : 

Please amend claims 1-2, 5-8, 12, 26, 28-29, 31-33, 35, and 37, and add claim 38- 
57 as follows. 

1 . (Currently Amended) A method^ comprising: 

forwarding a prefix value from a first node t o a second n ode in a packet switched 
environmen t to create a security association with the node based on the prefix value, said 
prefix value referring to a portion of a first intemet protocol address ^ associatod with the 
first nod e ; 

cr e ating a security association botwoon the first node and the second node based 
on the pr e fix value; 

wherein the security association is valid for a plurality of different intemet 
protocol addresses, each of said plurality of intemet protocol addresses including 
comprising said portion of the first intemet protocol address to which the prefix value 
refers. 

2. (Currently Amended) A -The m ethod as claimed in claim 1, wherein the 
packet switched environment is a intemet protocol multimedia subsystem of a 3rd 
generation network^ 
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3. (Currently Amended) The A -method as claimed in claim 1, wherein the 
first nodo m ethod is carried out at i s-user equipment. 

4. (Canceled) 

5. (Currently Amended) The A -method as claimed in claim 28, wherein the 
message is a protocol message^ 

6. (Currently Amended) The A -method as claimed in claim 5, wherein the 
protocol a session initiation protocol. 

7. (Currently Amended) The A -method as claimed in claim 28, wherein the 
message is a session initiation protocol register message. 

8. (Currently Amended) The A -method as claimed in claim 28, wherein the 
prefix value is included in a header of the message. 

9-11. (Canceled) 
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12. (Currently Amended) The A r-method as claimed in claim 1, wherein the 
prefix value is allocated by a gateway general packet radio service support node. 

13-25. (Canceled) 

26. (Currently Amended) A communication torminal A n apparatus, comprising: 
a transmitter configured to forward a prefix value to b e forwarded to a node in a 

packet switched environment to create a security association with th e communication 
terminal w ith the node based on the prefix value, said prefix value referring to a portion of 
a first intemet protocol address of the communication terminal;^ 

wherein the security association is valid for a plurality of different intemet 
protocol addresses, each of said plurality of intemet protocol addresses including 
comprising said portion of the first intemet protocol address to which the prefix value 
refers. 

27. (Canceled) 

28. (Currently Amended) The A rmethod as claimed in claim 1, wherein the 
forwarding of the prefix value from the first node to the second node comprises 
forwarding the prefix value in a message. 
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29. (Currently Amended) An apparatus. A communication t e rmin al 
comprising: 

forwarding means for forwarding a prefix value to a node in a packet switched 
environment to create a security association with the communication t e rminal w ith the 
node based on the prefix value, said prefix value referring to a portion of a first intemet 
protocol address of the communication terminal;^ 

wherein the security association is valid for a plurality of different intemet 
protocol addresses, each of said plurality of intemet protocol addresses including 
comprising said portion of the first intemet protocol address to which the prefix value 
refers. 

30. (Canceled) 

3 1 . (Currently Amended) A second nod o An apparatus, comprising: 

a receiving unit for rocoivin gc onfigured to receive a prefix value fi-om a first-node 
in a packet switched environment, said prefix value referring to a portion of a first 
intemet protocol address of the first node ; and 

a creation unit for croatin g configured to create a security association between the 
firstnode and the s e cond node apparatus b ased on the prefix valuet-^ 

wherein the security association is valid for a plurality of different intemet 
protocol addresses, each of said plurality of intemet protocol addresses including 
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comprising said portion of the first internet protocol address to which the prefix value 
refers. 

32. (Currently Amended) A second node A n apparatus, comprising: 
receiving means for receiving a prefix value from a fifst-node in a packet switched 

environment, said prefix value referring to a portion of a first internet protocol address-ef 
the first node ; and 

creation means for creating a security association between the lifst-node and the 
s e cond node apparatus b ased on the prefix valuet^ 

wherein the security association is valid for a plurality of different internet 
protocol addresses, each of said plurality of internet protocol addresses including 
comprising said portion of the first intemet protocol address to which the prefix value 
refers. 

33. (Currently Amended) The A rmethod as claimed in claim 1, wherein the 
first intemet protocol address and another of the plurality of intemet protocol addresses, 
in addition to the first int e met protocol address, is are an-intemet protocol addresses of 
the same first node a pparatus . 

34. (Canceled) 
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3 5 . (Currently Amended) A communication torminal T he apparatus as claimed 
in claim 26, wherein another of tho plurality of int e mot protocol address e s, in addition to 
the first internet protocol address and another of the plurality of internet protocol 
addresses are r 4s-an-intemet protocol addresses of the same first node a pparatus . 

36. (Canceled) 

37. (Currently Amended) A second nod e The apparatus as claimed in claim 31, 
wherein another of th e pluralit>^ of intcmet protocol addresses, in addition to t he first 
intemet protocol address and another of the plurality of internet protocol addresses are r 4s 
an-intemet protocol addresses of the same fe sf-node. 

38. (New) A method, comprising: 

receiving a prefix value from a node in a packet switched environment, said prefix 
value referring to a portion of a first intemet protocol address; and 

creating a security association with the node based on the prefix value; 

wherein the security association is valid for a plurality of different intemet 
protocol addresses, each of said plurality of intemet protocol addresses comprising said 
portion of the first internet protocol address to which the prefix value refers. 
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39. (New) The method as claimed in claim 38, wherein the first internet 
protocol address and another of the plurality of internet protocol addresses are internet 
protocol addresses of the same node. 

40. (New) A computer program embodied on a computer-readable medium, 
the computer program configured to control a processor to perform operations 
comprising: 

receiving a prefix value from a node in a packet switched environment, said prefix 
value referring to a portion of a first internet protocol address; and 

creating a security association with the node based on the prefix value; 

wherein the security association is valid for a plurality of different intemet 
protocol addresses, each of said plurality of intemet protocol addresses comprising said 
portion of the first intemet protocol address to which the prefix value refers. 

41. (New) A computer program embodied on a computer-readable medium, 
the computer program configured to control a processor to perform operations 
comprising: 

forwarding a prefix value to a node in a packet switched environment to create a 
security association with the node based on the prefix value, said prefix value referring to 
a portion of a first intemet protocol address; 
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wherein the security association is valid for a plurality of different internet 
protocol addresses, each of said plurality of internet protocol addresses comprising said 
portion of the first internet protocol address to which the prefix value refers. 

42. (New) The apparatus as claimed in claim 26, wherein the packet switched 
environment is a internet protocol multimedia subsystem of a 3rd generation network 

43. (New) The apparatus as claimed in claim 26, comprising user equipment. 

44. (New) The apparatus as claimed in claim 26, wherein the transmitter is 
configured to forward the prefix value in a message. 

45. (New) The apparatus as claimed in claim 44, wherein the message is a 
protocol message 

46. (New) The apparatus as claimed in claim 45, wherein the protocol a session 
initiation protocol. 

47. (New) The apparatus as claimed in claim 44, wherein the message is a 
session initiation protocol register message. 
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48. (New) The apparatus as claimed in claim 44, wherein the prefix value is 
included in a header of the message. 

49. (New) The apparatus as claimed in claim 48, wherein the header is a 
security client header. 

50. (New) The apparatus as claimed in claim 49, wherein the prefix value is 
included in an extension parameter of the security client header. 

5 1 . (New) The apparatus as claimed in claim 26, wherein the prefix value is 
allocated by a gateway general packet radio service support node. 

52. (New) The apparatus as claimed in claim 31, wherein the packet switched 
environment is a internet protocol multimedia subsystem of a 3rd generation network 

53. (New) The apparatus as claimed in claim 31, comprising proxy call state 
control function entity. 

54. (New) The apparatus as claimed in claim 31, wherein the receiver is 
configured to receive the prefix value in a message. 
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55. (New) The apparatus as claimed in claim 54, wherein the message is a 
session initiation protocol register message. 

56. (New) the apparatus as claimed in claim 54, wherein the prefix value is 
included in a header of the message. 

57. (New) The apparatus as claimed in claim 56, wherein the header is a 
security client header. 
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